IN THE SPECIFICATION 
Please replace the paragraph at page 36, line 18, with the following rewritten 
paragraph: 

59 Authorized address information storag e unit providing server 

Please replace the paragraph [0140] beginning at page 53, with the following 
rewritten paragraph: 

[0140] In the distributed denial-of-service attack protecting system 50, 

authorized address information is provided from an authorized address information providing 
server 59 that integrally manages the authorized address information, to a gate device 58. 
More specifically, an address issuing server 60 previously reports authorized address 
information to the authorized address information providing server 59 (step (1) of Fig. 1 1), to 
store the authorized address information in the authorized address information providing 
server 59 (step (2) of Fig. 11). When an authorized-address-information transmission request 
is issued from the gate device 58 to the authorized address information providing server 59 
(step (3) of Fig. 11), the authorized address information providing server 59 transmits the 
authorized address information to the gate device 58 (step (4) of Fig. 1 1), and the gate device 
58 automatically generates the normal condition information based on the authorized address 
information received (step (5) of Fig. 1 1). Here, the case, where the authorized address 
information providing server 59 stores the authorized address information issued from the 
address issuing server 60, is shown for convenience in explanation, but the authorized 
address information providing server 59 also stores the authorized address information issued 
from another address issuing server or from a communication device, which is an authorized 
terminal. For example, if it is authenticated that a communication device 16 of Fig. 1 1 is an 
authorized device that does not transmit a packet to attack on a communication device [[17]] 
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7, the authorized address information providing server 59 also stores the authorized address 
information issued from the communication device 16. 

Please replace the paragraph [0141] at page 54, with the following rewritten 
paragraph: 

[0141] The system construction of the distributed denial-of-service attack 

protecting system 50 is explained below. The distributed denial-of-service attack protecting 
system 50 includes a plurality of repeater devices 53 to 56 that repeat a packet to be 
transmitted through the network 2, the gate device 58 that restricts the passage of a packet to 
be transmitted to the communication device 7 through the network 2, and the authorized 
address information storag e unit providing server 59 that stores the authorized address 
information indicating the source address of a packet that does not attack through the network 
2. The construction of the distributed denial-of-service attack protecting system 50 is only an 
example. In other words, the number of repeater devices and gate devices and the way to 
construct networks are not restricted to those shown in the figures. 

Please replace the paragraph [0143] at page 55, with the following rewritten 
paragraph: 

[0143] Here, the repeater device 53 is connected to the repeater device 54 and 

the gate device 58. The repeater device 54 is connected to the communication device 15, the 
repeater device 53, and the authorized address information storag e unit providing unit 59. 
The repeater device 55 is connected to the communication device 16 and the repeater device 
56. The repeater device 56 is connected to the repeater device 55, the edge router 11, and the 
gate device 58. 
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Please replace the paragraph [0144] at page 55, with the following rewritten 
paragraph: 

[0144] Fig. 12 is a detailed block diagram of the gate device 58. The gate 

device 58 includes the attack detector 20; the suspicious signature generator 21; the normal 
condition information storage unit 22; a normal condition information generator 73 that 
generates normal condition information to be stored in the normal condition information 
storage unit 22; the normal signature generator 24; the malicious signature generator 25; the 
packet restricting unit 26; a signature reporting unit 77 that reports the suspicious signature 
and the normal signature to the repeater device [[3]] 53 and the repeater device [[6]] 56, each 
of which is provided in the adjacent relation to the gate device 58; and the network interface 
28. 

Please replace the paragraph [0145] beginning at page 55, with the following 
rewritten paragraph: 

[0145] The normal condition information generator 73 transmits an 

authorized-address-information transmission request that requests transmission of authorized 
address information, to the authorized address information storage unit providing unit 59. 
When the network interface 28 receives the authorized address information transmitted by the 
authorized address information storag e unit p roviding unit 59 in response to the authorized- 
address-information transmission request, the normal condition information generator 73 
generates normal condition information based on the authorized address information, and 
updates the normal condition information stored in the normal condition information storage 
unit 22, with the normal condition information generated. Transmission of the authorized- 
address-information transmission request by the normal condition information generator 73 
may be performed in response to its startup by the operator of the gate device 58, or may be 
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periodically performed. The signature reporting unit 77 does not report address information 
for a gate device to a repeater device, unlike the signature reporting unit 27 which forms the 
gate device 8 as explained in the first embodiment. 

Please replace the paragraph [0146] at page 56, with the following rewritten 
paragraph: 

[0146] Fig. 13 is a detailed block diagram of the repeater device 56. Although 

the configuration of the repeater device 56 is explained below for convenience in explanation, 
the other repeater devices 53 to 55 are also configured in the same manner as that of the 
repeater device 56. The repeater device 56 includes the input port 30, the switch 31, the 
output port 32, the malicious signature generator 35, the packet restricting unit 36, and a 
signature repeater 87 that repeats the suspicious signature and the normal signature to the 
adjacent repeater device [[5]] 55. 

Please replace the paragraph [0148] beginning at page 56, with the following 
rewritten paragraph: 

[0148] Referring to Fig. 1 1, the address issuing server 60 connected to the 

LAN 9 registers the address information for the LAN 9 or the address information for the 
communication devices 12 and 13 connected to the LAN 9, i.e. the authorized address 
information, in the authorized address information storage unit providing unit 59. 

Please replace the paragraph [0151] beginning at page 57, with the following 
rewritten paragraph: 

[0151] Fig. 14 is a sequence diagram of a process procedure for updating 

normal condition information for the distributed denial-of-service attack protecting system 50 
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according to the second embodiment. At first, the authorized address information transmitted 
from the address issuing server 60 is stored in the authorized address information providing 
server 59 (step S41). When an authorized-address-information transmission request is 
transmitted by the normal condition information generator 73 of the gate device 58 to the 
authorized address information storage unit providing unit 59 (step S42), the authorized 
address information is transmitted from the authorized address information storag e unit 
providing unit 59 to the gate device 58 in response to the authorized-address-information 
transmission request (step S43). 

Please replace the paragraph [0183] at page 69, with the following rewritten 
paragraph: 

[0183] The authorized address information storage unit 138 is formed with a 

nonvolatile storage medium, and stores authorized address information. 

Please cancel the original Abstract at page 91, lines 1-12 in its entirety, and insert 
therefor the following replacement Abstract on a separate sheet as follows: 
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